
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
File: 7qiugNcT5rItsOxgkVfwxZpS_X8.mft (raw, json)
Hash identifier: GYlTsQzCcCEdz8K6361MswbC18qhPQmPKXanO+LjlXY=
Subject key identifier: 3D:A6:D4:5E:BC:9A:2F:DB:EF:5E:47:BD:47:C0:26:1D:86:0C:96:2E
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Certificate issuer: /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial: 359B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
Manifest number: 3553
Signing time: Tue 24 Mar 2026 14:50:16 +0000
Manifest this update: Tue 24 Mar 2026 14:50:16 +0000
Manifest next update: Tue 31 Mar 2026 14:50:16 +0000
Files and hashes: 1: 7qiugNcT5rItsOxgkVfwxZpS_X8.crl (hash: 8LxJdPe6O0Qcc3YDUq5tKWsAZtVhKKqReukkAEY1v3Y=)
2: 2ACF9E0C855C11EB8C076013C4F9AE02.roa (hash: RNuWwl4ucRlwsOZtGnFpFuiswJzOcCNas2gxr3gm8mE=)
3: 2A73A3403A0711F081048A4EC4F9AE02.roa (hash: dvlRe6H3F8B2GwYIE840UeTvVO5dQ86LFZ7LGPZOm2k=)
4: 6C0C85D0A43011ECA230771BC4F9AE02.roa (hash: LL2Fp2e55MEWgbkr5inndl6+DJiSk2JSjx4YlfL31Ys=)
5: F026CE74927411EDB020A481C4F9AE02.roa (hash: QKAwXjlAKaeSYPJnynXkKE/C3RLluritzofePdZuC8Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13723 (0x359b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Validity
Not Before: Mar 24 14:50:16 2026 GMT
Not After : Mar 31 14:50:16 2026 GMT
Subject: CN=69c2a4a8-2e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:17:a7:d1:43:58:58:17:0b:60:91:f2:66:
0a:02:aa:1c:03:38:76:da:15:29:7b:df:ad:ad:7d:
28:b8:a9:c9:58:f2:2c:ad:0c:da:bd:c2:85:78:e1:
1d:49:13:ad:57:93:89:24:f8:08:21:15:9f:c5:9a:
34:52:21:74:70:32:c0:6e:6e:7c:14:76:bb:03:34:
dc:cb:4e:e9:fb:e5:8c:84:94:fa:5a:ca:81:3e:d9:
6c:f3:c7:49:0f:04:79:8c:e7:3d:7b:91:65:a8:6b:
0b:b6:dc:bb:22:66:25:99:1e:fe:f7:b6:86:c7:6b:
e2:a1:47:b3:db:8e:6a:0c:11:0a:fc:c0:79:6a:ed:
55:ce:f4:33:c5:7c:9a:31:65:34:0b:0e:32:b5:8f:
50:e6:68:4f:7d:e5:e7:a5:71:90:ea:57:a2:48:28:
4b:b2:eb:bf:2b:47:f5:a6:1d:62:84:73:de:51:82:
40:6b:d1:52:73:eb:23:d9:a0:50:34:1d:15:26:20:
73:00:b3:50:46:28:a8:c4:cd:44:55:96:01:43:61:
d3:0c:81:7e:9c:88:6c:74:fd:b6:8b:84:8f:fd:31:
d7:05:b6:33:88:c9:df:ee:0b:76:da:76:e2:33:63:
9e:d9:2c:1d:10:cd:11:0d:f7:18:5f:7b:5f:6d:cb:
17:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A6:D4:5E:BC:9A:2F:DB:EF:5E:47:BD:47:C0:26:1D:86:0C:96:2E
X509v3 Authority Key Identifier:
keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:7d:73:1a:65:53:b4:e7:71:05:8b:f5:80:27:b4:e1:70:88:
30:94:c5:6b:bd:82:29:9a:c3:65:04:df:08:5e:ee:74:5c:68:
ad:d3:47:7e:8a:3c:3b:3f:82:10:0e:9d:2e:d7:65:f8:ac:5f:
a0:17:bf:a6:5e:42:37:ae:79:cf:09:33:57:74:27:69:76:ee:
dd:bb:30:22:56:00:f7:64:8c:de:17:12:54:83:f5:9f:7c:47:
e3:f0:61:07:b7:37:3e:ac:82:e1:5b:f5:d0:e4:c3:d0:00:a0:
c4:f9:d1:c1:0b:be:e8:ad:83:40:68:f3:67:b2:b8:34:ad:50:
ba:52:64:01:c7:1f:08:63:e2:f8:b1:0f:81:94:b3:06:a2:0c:
ec:0e:08:86:ba:53:21:0b:20:6a:69:a2:6e:1a:b5:9c:51:d6:
4d:a0:4e:45:6a:01:d3:df:15:de:a8:61:b3:18:4e:e9:4b:26:
7b:43:46:d7:3b:38:37:fe:39:9b:b7:54:8a:09:c7:70:18:b3:
0e:11:0d:dd:80:ec:08:f7:1b:db:e3:fd:8a:de:aa:3f:a6:a6:
8a:2d:1c:2f:4c:b3:96:58:e1:a1:8b:77:e0:a1:19:5c:7e:5e:
a5:2b:40:96:fd:bf:bf:15:79:6a:2d:a4:11:8d:00:25:8d:8c:
ea:e6:1e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:01:07 2026 by rpki-client